Enterprise Security Engineer: AI-Driven IAM & Endpoints

TRM Labs; United States; On-site; USD 180,000 - 200,000; Full time

Benefits offered by this job

Equity plan

Equity program

Job summary

TRM Labs is seeking an Enterprise Security Engineer to harden and scale our corporate environment. You will design and ship identity, endpoint, and SaaS security improvements, codify controls using automation and infrastructure-as-code, and partner with Security, Compliance, and engineering teams to raise the security baseline while preserving a great employee experience.

Your work will include building secure-by-default endpoint baselines for macOS and Windows, automating identity and access

Qualifications

• Experience engineering and scaling end-user and endpoint security for macOS and Windows.
• Hands-on with Entra ID and Google Workspace administration and governance.
• Ability to automate real operational workflows using Bash, PowerShell or Python.
• Proficiency with IaC tooling (Terraform) and policy-as-code concepts.
• Comfort using AI-assisted tooling to speed up engineering tasks while maintaining verification.

Responsibilities

• Design and ship identity, endpoint, and SaaS security improvements.
• Automate controls using infrastructure-as-code and maintain changelogs.
• Harden corporate environment with secure-by-default baselines.
• Partner with Security, Compliance, and engineering teams to raise security baseline while preserving experience.
• Participate in on-call rotation and drive remediation pipelines and reporting.

Skills

Identity and endpoint security

Entra ID (conditional access, SSO)

Google Workspace administration

Automation (Bash, PowerShell, Python)

Terraform / IaC / policy-as-code

AI tooling for engineering

Tools

Entra ID

Google Workspace

Terraform

n8n / SlackOps

APIs / scripting

Job description

TRM Labs is seeking an Enterprise Security Engineer to harden and scale our corporate environment. You will design and ship identity, endpoint, and SaaS security improvements, codify controls using automation and infrastructure-as-code, and partner with Security, Compliance, and engineering teams to raise the security baseline while preserving a great employee experience.

Your work will include building secure-by-default endpoint baselines for macOS and Windows, automating identity and access